aws-sdk-securityhub 1.75.0 → 1.76.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aaa6faff45a268abc6ecf0c90d8bdba1fbe4a8a1bee44fbb7e19b55608ed1660
-  data.tar.gz: df8b33938c1c0c5413a558b900737d70c24ce9ebaccb2d3e7fbc1fa20233d7cd
+  metadata.gz: 4551566a066756c3813881b2ed679d93205cb6b959a93ce2ad318acdf74ba6c2
+  data.tar.gz: d2c25b9091800722ed0b1e030b51b8c7d9889a6c68982f3a26f2867eb511209a
 SHA512:
-  metadata.gz: f280edf6cdc102e0fa7775e79022cbb06227662187732de522eef8dced53cdaf04b2cb9682bab6b733b0b542eed6aa4d157fb66a2b995381ce5e79d90c7fe667
-  data.tar.gz: e461604a34deed87ccdc2c89d5073fc4024f0a059414d96295a19548c2a70bd34c36b8908d86fb0f275adffcaec46793140c6b5ff1c3edd71736b29aa621d12e
+  metadata.gz: 9c307e08e1229c092c1b88abc7bb11df62e99d88fcb09a2e2010f3beeebc811f407a986d1648f059253fc505705f71e8e667c18ce3ebb34255a1b584951f548e
+  data.tar.gz: a1f468b67e4c962edddadd00229428f6b06056bf7b82276e216ed9f3f834d8e78bf23c3ee69988fa1efc68eff06973593af0d064877db59a6fe5ee563b50b9ea

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.76.0 (2023-01-31)
+------------------
+
+* Feature - New fields have been added to the AWS Security Finding Format. Compliance.SecurityControlId is a unique identifier for a security control across standards. Compliance.AssociatedStandards contains all enabled standards in which a security control is enabled.
+
 1.75.0 (2023-01-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.75.0
+1.76.0

data/lib/aws-sdk-securityhub/client.rb

@@ -1566,6 +1566,18 @@ module Aws::SecurityHub
     #           value: false,
     #         },
     #       ],
+    #       compliance_security_control_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
+    #       compliance_associated_standards_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
     #     },
     #     group_by_attribute: "NonEmptyString", # required
     #   })
@@ -3186,6 +3198,18 @@ module Aws::SecurityHub
     #           value: false,
     #         },
     #       ],
+    #       compliance_security_control_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
+    #       compliance_associated_standards_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
     #     },
     #     sort_criteria: [
     #       {
@@ -3590,6 +3614,12 @@ module Aws::SecurityHub
     #   resp.insights[0].filters.finding_provider_fields_types[0].comparison #=> String, one of "EQUALS", "PREFIX", "NOT_EQUALS", "PREFIX_NOT_EQUALS"
     #   resp.insights[0].filters.sample #=> Array
     #   resp.insights[0].filters.sample[0].value #=> Boolean
+    #   resp.insights[0].filters.compliance_security_control_id #=> Array
+    #   resp.insights[0].filters.compliance_security_control_id[0].value #=> String
+    #   resp.insights[0].filters.compliance_security_control_id[0].comparison #=> String, one of "EQUALS", "PREFIX", "NOT_EQUALS", "PREFIX_NOT_EQUALS"
+    #   resp.insights[0].filters.compliance_associated_standards_id #=> Array
+    #   resp.insights[0].filters.compliance_associated_standards_id[0].value #=> String
+    #   resp.insights[0].filters.compliance_associated_standards_id[0].comparison #=> String, one of "EQUALS", "PREFIX", "NOT_EQUALS", "PREFIX_NOT_EQUALS"
     #   resp.insights[0].group_by_attribute #=> String
     #   resp.next_token #=> String
     #
@@ -4832,6 +4862,18 @@ module Aws::SecurityHub
     #           value: false,
     #         },
     #       ],
+    #       compliance_security_control_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
+    #       compliance_associated_standards_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
     #     },
     #     note: {
     #       text: "NonEmptyString", # required
@@ -5492,6 +5534,18 @@ module Aws::SecurityHub
     #           value: false,
     #         },
     #       ],
+    #       compliance_security_control_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
+    #       compliance_associated_standards_id: [
+    #         {
+    #           value: "NonEmptyString",
+    #           comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #         },
+    #       ],
     #     },
     #     group_by_attribute: "NonEmptyString",
     #   })
@@ -5623,7 +5677,7 @@ module Aws::SecurityHub
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.75.0'
+      context[:gem_version] = '1.76.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -36,6 +36,8 @@ module Aws::SecurityHub
     AdminStatus = Shapes::StringShape.new(name: 'AdminStatus')
     AdminsMaxResults = Shapes::IntegerShape.new(name: 'AdminsMaxResults')
     ArnList = Shapes::ListShape.new(name: 'ArnList')
+    AssociatedStandard = Shapes::StructureShape.new(name: 'AssociatedStandard')
+    AssociatedStandardsList = Shapes::ListShape.new(name: 'AssociatedStandardsList')
     AutoEnableStandards = Shapes::StringShape.new(name: 'AutoEnableStandards')
     AvailabilityZone = Shapes::StructureShape.new(name: 'AvailabilityZone')
     AvailabilityZones = Shapes::ListShape.new(name: 'AvailabilityZones')
@@ -1009,6 +1011,11 @@ module Aws::SecurityHub
 
     ArnList.member = Shapes::ShapeRef.new(shape: NonEmptyString)
 
+    AssociatedStandard.add_member(:standards_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "StandardsId"))
+    AssociatedStandard.struct_class = Types::AssociatedStandard
+
+    AssociatedStandardsList.member = Shapes::ShapeRef.new(shape: AssociatedStandard)
+
     AvailabilityZone.add_member(:zone_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ZoneName"))
     AvailabilityZone.add_member(:subnet_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "SubnetId"))
     AvailabilityZone.struct_class = Types::AvailabilityZone
@@ -3980,6 +3987,8 @@ module Aws::SecurityHub
     AwsSecurityFindingFilters.add_member(:finding_provider_fields_severity_original, Shapes::ShapeRef.new(shape: StringFilterList, location_name: "FindingProviderFieldsSeverityOriginal"))
     AwsSecurityFindingFilters.add_member(:finding_provider_fields_types, Shapes::ShapeRef.new(shape: StringFilterList, location_name: "FindingProviderFieldsTypes"))
     AwsSecurityFindingFilters.add_member(:sample, Shapes::ShapeRef.new(shape: BooleanFilterList, location_name: "Sample"))
+    AwsSecurityFindingFilters.add_member(:compliance_security_control_id, Shapes::ShapeRef.new(shape: StringFilterList, location_name: "ComplianceSecurityControlId"))
+    AwsSecurityFindingFilters.add_member(:compliance_associated_standards_id, Shapes::ShapeRef.new(shape: StringFilterList, location_name: "ComplianceAssociatedStandardsId"))
     AwsSecurityFindingFilters.struct_class = Types::AwsSecurityFindingFilters
 
     AwsSecurityFindingIdentifier.add_member(:id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Id"))
@@ -4337,6 +4346,8 @@ module Aws::SecurityHub
     Compliance.add_member(:status, Shapes::ShapeRef.new(shape: ComplianceStatus, location_name: "Status"))
     Compliance.add_member(:related_requirements, Shapes::ShapeRef.new(shape: RelatedRequirementsList, location_name: "RelatedRequirements"))
     Compliance.add_member(:status_reasons, Shapes::ShapeRef.new(shape: StatusReasonsList, location_name: "StatusReasons"))
+    Compliance.add_member(:security_control_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "SecurityControlId"))
+    Compliance.add_member(:associated_standards, Shapes::ShapeRef.new(shape: AssociatedStandardsList, location_name: "AssociatedStandards"))
     Compliance.struct_class = Types::Compliance
 
     ContainerDetails.add_member(:container_runtime, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ContainerRuntime"))

data/lib/aws-sdk-securityhub/types.rb

@@ -307,6 +307,28 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Information about an enabled security standard in which a security
+    # control is enabled.
+    #
+    # @!attribute [rw] standards_id
+    #   The unique identifier of a standard in which a control is enabled.
+    #   This field consists of the resource portion of the Amazon Resource
+    #   Name (ARN) returned for a standard in the [DescribeStandards][1] API
+    #   response.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AssociatedStandard AWS API Documentation
+    #
+    class AssociatedStandard < Struct.new(
+      :standards_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about an Availability Zone.
     #
     # @!attribute [rw] zone_name
@@ -15395,7 +15417,7 @@ module Aws::SecurityHub
     #   An array of up to three Git repositories associated with the
     #   notebook instance. These can be either the names of Git repositories
     #   stored as resources in your account, or the URL of Git repositories
-    #   in [AWS CodeCommit][1] or in any other Git repository. These
+    #   in [CodeCommit][1] or in any other Git repository. These
     #   repositories are cloned at the same level as the default repository
     #   of your notebook instance. For more information, see [Associating
     #   Git repositories with SageMaker notebook instances][2] in the
@@ -15411,8 +15433,8 @@ module Aws::SecurityHub
     #   The Git repository associated with the notebook instance as its
     #   default code repository. This can be either the name of a Git
     #   repository stored as a resource in your account, or the URL of a Git
-    #   repository in [AWS CodeCommit][1] or in any other Git repository.
-    #   When you open a notebook instance, it opens in the directory that
+    #   repository in [CodeCommit][1] or in any other Git repository. When
+    #   you open a notebook instance, it opens in the directory that
     #   contains this repository. For more information, see [Associating Git
     #   repositories with SageMaker notebook instances][2] in the *Amazon
     #   SageMaker Developer Guide*.
@@ -16448,6 +16470,23 @@ module Aws::SecurityHub
     #   results.
     #   @return [Array<Types::BooleanFilter>]
     #
+    # @!attribute [rw] compliance_security_control_id
+    #   The unique identifier of a control across standards. Values for this
+    #   field typically consist of an Amazon Web Service and a number, such
+    #   as APIGateway.5.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] compliance_associated_standards_id
+    #   The unique identifier of a standard in which a control is enabled.
+    #   This field consists of the resource portion of the Amazon Resource
+    #   Name (ARN) returned for a standard in the [DescribeStandards][1] API
+    #   response.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html
+    #   @return [Array<Types::StringFilter>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSecurityFindingFilters AWS API Documentation
     #
     class AwsSecurityFindingFilters < Struct.new(
@@ -16545,7 +16584,9 @@ module Aws::SecurityHub
       :finding_provider_fields_severity_label,
       :finding_provider_fields_severity_original,
       :finding_provider_fields_types,
-      :sample)
+      :sample,
+      :compliance_security_control_id,
+      :compliance_associated_standards_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -17777,8 +17818,8 @@ module Aws::SecurityHub
 
     # Provides details about rules in a rule group. A rule identifies web
     # requests that you want to allow, block, or count. Each rule includes
-    # one top-level Statement that AWS WAF uses to identify matching web
-    # requests, and parameters that govern how AWS WAF handles them.
+    # one top-level Statement that WAF uses to identify matching web
+    # requests, and parameters that govern how WAF handles them.
     #
     # @!attribute [rw] action
     #   The action that WAF should take on a web request when it matches the
@@ -18463,12 +18504,25 @@ module Aws::SecurityHub
     #   [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-results.html#securityhub-standards-results-asff
     #   @return [Array<Types::StatusReason>]
     #
+    # @!attribute [rw] security_control_id
+    #   The unique identifier of a control across standards. Values for this
+    #   field typically consist of an Amazon Web Service and a number, such
+    #   as APIGateway.5.
+    #   @return [String]
+    #
+    # @!attribute [rw] associated_standards
+    #   The enabled security standards in which a security control is
+    #   currently enabled.
+    #   @return [Array<Types::AssociatedStandard>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Compliance AWS API Documentation
     #
     class Compliance < Struct.new(
       :status,
       :related_requirements,
-      :status_reasons)
+      :status_reasons,
+      :security_control_id,
+      :associated_standards)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -20716,27 +20770,27 @@ module Aws::SecurityHub
     #
     #   The status can have one of the following values:
     #
-    #   * `CREATED` - Indicates that the administrator account added the
+    #   * `Created` - Indicates that the administrator account added the
     #     member account, but has not yet invited the member account.
     #
-    #   * `INVITED` - Indicates that the administrator account invited the
+    #   * `Invited` - Indicates that the administrator account invited the
     #     member account. The member account has not yet responded to the
     #     invitation.
     #
-    #   * `ENABLED` - Indicates that the member account is currently active.
+    #   * `Enabled` - Indicates that the member account is currently active.
     #     For manually invited member accounts, indicates that the member
     #     account accepted the invitation.
     #
-    #   * `REMOVED` - Indicates that the administrator account disassociated
+    #   * `Removed` - Indicates that the administrator account disassociated
     #     the member account.
     #
-    #   * `RESIGNED` - Indicates that the member account disassociated
+    #   * `Resigned` - Indicates that the member account disassociated
     #     themselves from the administrator account.
     #
-    #   * `DELETED` - Indicates that the administrator account deleted the
+    #   * `Deleted` - Indicates that the administrator account deleted the
     #     member account.
     #
-    #   * `ACCOUNT_SUSPENDED` - Indicates that an organization account was
+    #   * `AccountSuspended` - Indicates that an organization account was
     #     suspended from Amazon Web Services at the same time that the
     #     administrator account tried to enable the organization account as
     #     a member account.

data/lib/aws-sdk-securityhub.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-securityhub/customizations'
 # @!group service
 module Aws::SecurityHub
 
-  GEM_VERSION = '1.75.0'
+  GEM_VERSION = '1.76.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityhub
 version: !ruby/object:Gem::Version
-  version: 1.75.0
+  version: 1.76.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-01-18 00:00:00.000000000 Z
+date: 2023-01-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core