@awboost/cfn-resource-types 0.1.359 → 0.1.361
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/AWS-Amplify-App.d.ts +8 -0
- package/lib/AWS-CleanRooms-Collaboration.d.ts +3 -3
- package/lib/AWS-EC2-LaunchTemplate.d.ts +10 -0
- package/lib/AWS-InspectorV2-Filter.d.ts +63 -0
- package/lib/AWS-Organizations-Policy.d.ts +2 -2
- package/lib/AWS-SecurityHub-AggregatorV2.d.ts +53 -0
- package/lib/AWS-SecurityHub-AggregatorV2.js +12 -0
- package/lib/AWS-SecurityHub-AutomationRuleV2.d.ts +398 -0
- package/lib/AWS-SecurityHub-AutomationRuleV2.js +12 -0
- package/package.json +1 -1
package/lib/AWS-Amplify-App.d.ts
CHANGED
|
@@ -45,6 +45,7 @@ export type AmplifyAppProperties = {
|
|
|
45
45
|
* @pattern `(?s).*`
|
|
46
46
|
*/
|
|
47
47
|
IAMServiceRole?: string;
|
|
48
|
+
JobConfig?: JobConfig;
|
|
48
49
|
/**
|
|
49
50
|
* @minLength `1`
|
|
50
51
|
* @maxLength `255`
|
|
@@ -190,6 +191,13 @@ export type EnvironmentVariable = {
|
|
|
190
191
|
*/
|
|
191
192
|
Value: string;
|
|
192
193
|
};
|
|
194
|
+
/**
|
|
195
|
+
* Type definition for `AWS::Amplify::App.JobConfig`.
|
|
196
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-amplify-app-jobconfig.html}
|
|
197
|
+
*/
|
|
198
|
+
export type JobConfig = {
|
|
199
|
+
BuildComputeType: "STANDARD_8GB" | "LARGE_16GB" | "XLARGE_72GB";
|
|
200
|
+
};
|
|
193
201
|
/**
|
|
194
202
|
* Type definition for `AWS::Amplify::App.Tag`.
|
|
195
203
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-amplify-app-tag.html}
|
|
@@ -14,7 +14,7 @@ export type CleanRoomsCollaborationProperties = {
|
|
|
14
14
|
*/
|
|
15
15
|
CreatorDisplayName: string;
|
|
16
16
|
CreatorMLMemberAbilities?: MLMemberAbilities;
|
|
17
|
-
CreatorMemberAbilities
|
|
17
|
+
CreatorMemberAbilities?: MemberAbility[];
|
|
18
18
|
CreatorPaymentConfiguration?: PaymentConfiguration;
|
|
19
19
|
DataEncryptionMetadata?: DataEncryptionMetadata;
|
|
20
20
|
/**
|
|
@@ -28,7 +28,7 @@ export type CleanRoomsCollaborationProperties = {
|
|
|
28
28
|
* @minLength `0`
|
|
29
29
|
* @maxLength `9`
|
|
30
30
|
*/
|
|
31
|
-
Members
|
|
31
|
+
Members?: MemberSpecification[];
|
|
32
32
|
/**
|
|
33
33
|
* @minLength `1`
|
|
34
34
|
* @maxLength `100`
|
|
@@ -117,7 +117,7 @@ export type MemberSpecification = {
|
|
|
117
117
|
*/
|
|
118
118
|
DisplayName: string;
|
|
119
119
|
MLMemberAbilities?: MLMemberAbilities;
|
|
120
|
-
MemberAbilities
|
|
120
|
+
MemberAbilities?: MemberAbility[];
|
|
121
121
|
PaymentConfiguration?: PaymentConfiguration;
|
|
122
122
|
};
|
|
123
123
|
/**
|
|
@@ -257,6 +257,16 @@ export type Ebs = {
|
|
|
257
257
|
Valid Range: Minimum value of 125. Maximum value of 1000.
|
|
258
258
|
*/
|
|
259
259
|
Throughput?: number;
|
|
260
|
+
/**
|
|
261
|
+
* Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization*. Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.
|
|
262
|
+
This parameter is supported only for volumes created from snapshots. Omit this parameter if:
|
|
263
|
+
+ You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.
|
|
264
|
+
If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.
|
|
265
|
+
+ You want to create a volume that is initialized at the default rate.
|
|
266
|
+
|
|
267
|
+
For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EC2 User Guide*.
|
|
268
|
+
Valid range: 100 - 300 MiB/s
|
|
269
|
+
*/
|
|
260
270
|
VolumeInitializationRate?: number;
|
|
261
271
|
/**
|
|
262
272
|
* The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. The following are the supported volumes sizes for each volume type:
|
|
@@ -26,6 +26,7 @@ export type InspectorV2FilterProperties = {
|
|
|
26
26
|
* @maxLength `128`
|
|
27
27
|
*/
|
|
28
28
|
Name: string;
|
|
29
|
+
Tags?: FilterTagMap;
|
|
29
30
|
};
|
|
30
31
|
/**
|
|
31
32
|
* Attribute type definition for `AWS::InspectorV2::Filter`.
|
|
@@ -62,6 +63,21 @@ export type FilterCriteria = {
|
|
|
62
63
|
* @maxLength `10`
|
|
63
64
|
*/
|
|
64
65
|
AwsAccountId?: StringFilter[];
|
|
66
|
+
/**
|
|
67
|
+
* @minLength `1`
|
|
68
|
+
* @maxLength `10`
|
|
69
|
+
*/
|
|
70
|
+
CodeVulnerabilityDetectorName?: StringFilter[];
|
|
71
|
+
/**
|
|
72
|
+
* @minLength `1`
|
|
73
|
+
* @maxLength `10`
|
|
74
|
+
*/
|
|
75
|
+
CodeVulnerabilityDetectorTags?: StringFilter[];
|
|
76
|
+
/**
|
|
77
|
+
* @minLength `1`
|
|
78
|
+
* @maxLength `10`
|
|
79
|
+
*/
|
|
80
|
+
CodeVulnerabilityFilePath?: StringFilter[];
|
|
65
81
|
/**
|
|
66
82
|
* @minLength `1`
|
|
67
83
|
* @maxLength `10`
|
|
@@ -117,6 +133,16 @@ export type FilterCriteria = {
|
|
|
117
133
|
* @maxLength `10`
|
|
118
134
|
*/
|
|
119
135
|
EcrImageTags?: StringFilter[];
|
|
136
|
+
/**
|
|
137
|
+
* @minLength `1`
|
|
138
|
+
* @maxLength `10`
|
|
139
|
+
*/
|
|
140
|
+
EpssScore?: NumberFilter[];
|
|
141
|
+
/**
|
|
142
|
+
* @minLength `1`
|
|
143
|
+
* @maxLength `10`
|
|
144
|
+
*/
|
|
145
|
+
ExploitAvailable?: StringFilter[];
|
|
120
146
|
/**
|
|
121
147
|
* @minLength `1`
|
|
122
148
|
* @maxLength `10`
|
|
@@ -137,11 +163,41 @@ export type FilterCriteria = {
|
|
|
137
163
|
* @maxLength `10`
|
|
138
164
|
*/
|
|
139
165
|
FirstObservedAt?: DateFilter[];
|
|
166
|
+
/**
|
|
167
|
+
* @minLength `1`
|
|
168
|
+
* @maxLength `10`
|
|
169
|
+
*/
|
|
170
|
+
FixAvailable?: StringFilter[];
|
|
140
171
|
/**
|
|
141
172
|
* @minLength `1`
|
|
142
173
|
* @maxLength `10`
|
|
143
174
|
*/
|
|
144
175
|
InspectorScore?: NumberFilter[];
|
|
176
|
+
/**
|
|
177
|
+
* @minLength `1`
|
|
178
|
+
* @maxLength `10`
|
|
179
|
+
*/
|
|
180
|
+
LambdaFunctionExecutionRoleArn?: StringFilter[];
|
|
181
|
+
/**
|
|
182
|
+
* @minLength `1`
|
|
183
|
+
* @maxLength `10`
|
|
184
|
+
*/
|
|
185
|
+
LambdaFunctionLastModifiedAt?: DateFilter[];
|
|
186
|
+
/**
|
|
187
|
+
* @minLength `1`
|
|
188
|
+
* @maxLength `10`
|
|
189
|
+
*/
|
|
190
|
+
LambdaFunctionLayers?: StringFilter[];
|
|
191
|
+
/**
|
|
192
|
+
* @minLength `1`
|
|
193
|
+
* @maxLength `10`
|
|
194
|
+
*/
|
|
195
|
+
LambdaFunctionName?: StringFilter[];
|
|
196
|
+
/**
|
|
197
|
+
* @minLength `1`
|
|
198
|
+
* @maxLength `10`
|
|
199
|
+
*/
|
|
200
|
+
LambdaFunctionRuntime?: StringFilter[];
|
|
145
201
|
/**
|
|
146
202
|
* @minLength `1`
|
|
147
203
|
* @maxLength `10`
|
|
@@ -213,6 +269,11 @@ export type FilterCriteria = {
|
|
|
213
269
|
*/
|
|
214
270
|
VulnerablePackages?: PackageFilter[];
|
|
215
271
|
};
|
|
272
|
+
/**
|
|
273
|
+
* Type definition for `AWS::InspectorV2::Filter.FilterTagMap`.
|
|
274
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-filter-filtertagmap.html}
|
|
275
|
+
*/
|
|
276
|
+
export type FilterTagMap = Record<string, string>;
|
|
216
277
|
/**
|
|
217
278
|
* Type definition for `AWS::InspectorV2::Filter.MapComparison`.
|
|
218
279
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-filter-mapcomparison.html}
|
|
@@ -250,8 +311,10 @@ export type NumberFilter = {
|
|
|
250
311
|
export type PackageFilter = {
|
|
251
312
|
Architecture?: StringFilter;
|
|
252
313
|
Epoch?: NumberFilter;
|
|
314
|
+
FilePath?: StringFilter;
|
|
253
315
|
Name?: StringFilter;
|
|
254
316
|
Release?: StringFilter;
|
|
317
|
+
SourceLambdaLayerArn?: StringFilter;
|
|
255
318
|
SourceLayerHash?: StringFilter;
|
|
256
319
|
Version?: StringFilter;
|
|
257
320
|
};
|
|
@@ -32,9 +32,9 @@ export type OrganizationsPolicyProperties = {
|
|
|
32
32
|
*/
|
|
33
33
|
TargetIds?: string[];
|
|
34
34
|
/**
|
|
35
|
-
* The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2
|
|
35
|
+
* The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2, SECURITYHUB_POLICY
|
|
36
36
|
*/
|
|
37
|
-
Type: "SERVICE_CONTROL_POLICY" | "AISERVICES_OPT_OUT_POLICY" | "BACKUP_POLICY" | "TAG_POLICY" | "CHATBOT_POLICY" | "RESOURCE_CONTROL_POLICY" | "DECLARATIVE_POLICY_EC2";
|
|
37
|
+
Type: "SERVICE_CONTROL_POLICY" | "AISERVICES_OPT_OUT_POLICY" | "BACKUP_POLICY" | "TAG_POLICY" | "CHATBOT_POLICY" | "RESOURCE_CONTROL_POLICY" | "DECLARATIVE_POLICY_EC2" | "SECURITYHUB_POLICY";
|
|
38
38
|
};
|
|
39
39
|
/**
|
|
40
40
|
* Attribute type definition for `AWS::Organizations::Policy`.
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
|
+
/**
|
|
4
|
+
* The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.
|
|
5
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
6
|
+
*/
|
|
7
|
+
export type SecurityHubAggregatorV2Properties = {
|
|
8
|
+
/**
|
|
9
|
+
* The list of included Regions
|
|
10
|
+
* @minLength `1`
|
|
11
|
+
* @maxLength `50`
|
|
12
|
+
*/
|
|
13
|
+
LinkedRegions: string[];
|
|
14
|
+
/**
|
|
15
|
+
* Indicates to link a list of included Regions
|
|
16
|
+
*/
|
|
17
|
+
RegionLinkingMode: "SPECIFIED_REGIONS";
|
|
18
|
+
/**
|
|
19
|
+
* A key-value pair to associate with the Security Hub V2 resource.
|
|
20
|
+
*/
|
|
21
|
+
Tags?: Tags;
|
|
22
|
+
};
|
|
23
|
+
/**
|
|
24
|
+
* Attribute type definition for `AWS::SecurityHub::AggregatorV2`.
|
|
25
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html#aws-resource-securityhub-aggregatorv2-return-values}
|
|
26
|
+
*/
|
|
27
|
+
export type SecurityHubAggregatorV2Attributes = {
|
|
28
|
+
/**
|
|
29
|
+
* The aggregation Region of the AggregatorV2
|
|
30
|
+
* @pattern `^[a-zA-Z0-9-]{1,32}$`
|
|
31
|
+
*/
|
|
32
|
+
AggregationRegion: string;
|
|
33
|
+
/**
|
|
34
|
+
* The ARN of the AggregatorV2 being created and assigned as the unique identifier
|
|
35
|
+
* @pattern `arn:aws\S*:securityhub:\S*`
|
|
36
|
+
*/
|
|
37
|
+
AggregatorV2Arn: string;
|
|
38
|
+
};
|
|
39
|
+
/**
|
|
40
|
+
* Type definition for `AWS::SecurityHub::AggregatorV2.Tags`.
|
|
41
|
+
* A key-value pair to associate with the Security Hub V2 resource.
|
|
42
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-aggregatorv2-tags.html}
|
|
43
|
+
*/
|
|
44
|
+
export type Tags = Record<string, string>;
|
|
45
|
+
/**
|
|
46
|
+
* The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.
|
|
47
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
48
|
+
*/
|
|
49
|
+
export declare class SecurityHubAggregatorV2 extends $Resource<"AWS::SecurityHub::AggregatorV2", SecurityHubAggregatorV2Properties, SecurityHubAggregatorV2Attributes> {
|
|
50
|
+
static readonly Type = "AWS::SecurityHub::AggregatorV2";
|
|
51
|
+
constructor(logicalId: string, properties: SecurityHubAggregatorV2Properties, options?: $ResourceOptions);
|
|
52
|
+
}
|
|
53
|
+
//# sourceMappingURL=AWS-SecurityHub-AggregatorV2.d.ts.map
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
/**
|
|
3
|
+
* The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
5
|
+
*/
|
|
6
|
+
export class SecurityHubAggregatorV2 extends $Resource {
|
|
7
|
+
static Type = "AWS::SecurityHub::AggregatorV2";
|
|
8
|
+
constructor(logicalId, properties, options) {
|
|
9
|
+
super(logicalId, SecurityHubAggregatorV2.Type, properties, options);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=AWS-SecurityHub-AggregatorV2.js.map
|
|
@@ -0,0 +1,398 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
|
+
/**
|
|
4
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
5
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
6
|
+
*/
|
|
7
|
+
export type SecurityHubAutomationRuleV2Properties = {
|
|
8
|
+
/**
|
|
9
|
+
* A list of actions to be performed when the rule criteria is met
|
|
10
|
+
* @minLength `1`
|
|
11
|
+
* @maxLength `1`
|
|
12
|
+
*/
|
|
13
|
+
Actions: AutomationRulesActionV2[];
|
|
14
|
+
/**
|
|
15
|
+
* Defines the parameters and conditions used to evaluate and filter security findings
|
|
16
|
+
*/
|
|
17
|
+
Criteria: Criteria;
|
|
18
|
+
/**
|
|
19
|
+
* A description of the automation rule
|
|
20
|
+
* @minLength `1`
|
|
21
|
+
* @maxLength `256`
|
|
22
|
+
* @pattern `.*\S.*`
|
|
23
|
+
*/
|
|
24
|
+
Description: string;
|
|
25
|
+
/**
|
|
26
|
+
* The name of the automation rule
|
|
27
|
+
* @minLength `1`
|
|
28
|
+
* @maxLength `256`
|
|
29
|
+
* @pattern `.*\S.*`
|
|
30
|
+
*/
|
|
31
|
+
RuleName: string;
|
|
32
|
+
/**
|
|
33
|
+
* The value for the rule priority
|
|
34
|
+
* @min `1`
|
|
35
|
+
* @max `1000`
|
|
36
|
+
*/
|
|
37
|
+
RuleOrder: number;
|
|
38
|
+
/**
|
|
39
|
+
* The status of the automation rule
|
|
40
|
+
*/
|
|
41
|
+
RuleStatus?: "ENABLED" | "DISABLED";
|
|
42
|
+
/**
|
|
43
|
+
* A key-value pair to associate with a resource.
|
|
44
|
+
*/
|
|
45
|
+
Tags?: Tags;
|
|
46
|
+
};
|
|
47
|
+
/**
|
|
48
|
+
* Attribute type definition for `AWS::SecurityHub::AutomationRuleV2`.
|
|
49
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#aws-resource-securityhub-automationrulev2-return-values}
|
|
50
|
+
*/
|
|
51
|
+
export type SecurityHubAutomationRuleV2Attributes = {
|
|
52
|
+
/**
|
|
53
|
+
* The timestamp formatted in ISO8601
|
|
54
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
55
|
+
*/
|
|
56
|
+
CreatedAt: string;
|
|
57
|
+
/**
|
|
58
|
+
* The ARN of the automation rule
|
|
59
|
+
* @pattern `^arn:aws\S*:securityhub:[a-z0-9-]+:[0-9]{12}:automation-rulev2/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$`
|
|
60
|
+
*/
|
|
61
|
+
RuleArn: string;
|
|
62
|
+
/**
|
|
63
|
+
* The ID of the automation rule
|
|
64
|
+
* @pattern `^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$`
|
|
65
|
+
*/
|
|
66
|
+
RuleId: string;
|
|
67
|
+
/**
|
|
68
|
+
* The timestamp formatted in ISO8601
|
|
69
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
70
|
+
*/
|
|
71
|
+
UpdatedAt: string;
|
|
72
|
+
};
|
|
73
|
+
/**
|
|
74
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.AllowedOperators`.
|
|
75
|
+
* The logical operator used to combine multiple conditions
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-allowedoperators.html}
|
|
77
|
+
*/
|
|
78
|
+
export type AllowedOperators = "AND" | "OR";
|
|
79
|
+
/**
|
|
80
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.AutomationRulesActionV2`.
|
|
81
|
+
* Allows you to configure automated responses
|
|
82
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html}
|
|
83
|
+
*/
|
|
84
|
+
export type AutomationRulesActionV2 = {
|
|
85
|
+
/**
|
|
86
|
+
* The settings for integrating automation rule actions with external systems or service
|
|
87
|
+
*/
|
|
88
|
+
ExternalIntegrationConfiguration?: ExternalIntegrationConfiguration;
|
|
89
|
+
/**
|
|
90
|
+
* The changes to be applied to fields in a security finding when an automation rule is triggered
|
|
91
|
+
*/
|
|
92
|
+
FindingFieldsUpdate?: AutomationRulesFindingFieldsUpdateV2;
|
|
93
|
+
/**
|
|
94
|
+
* The category of action to be executed by the automation rule
|
|
95
|
+
*/
|
|
96
|
+
Type: "FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION";
|
|
97
|
+
};
|
|
98
|
+
/**
|
|
99
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.AutomationRulesFindingFieldsUpdateV2`.
|
|
100
|
+
* The changes to be applied to fields in a security finding when an automation rule is triggered
|
|
101
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html}
|
|
102
|
+
*/
|
|
103
|
+
export type AutomationRulesFindingFieldsUpdateV2 = {
|
|
104
|
+
/**
|
|
105
|
+
* Notes or contextual information for findings that are modified by the automation rule
|
|
106
|
+
* @pattern `.*\S.*`
|
|
107
|
+
*/
|
|
108
|
+
Comment?: string;
|
|
109
|
+
/**
|
|
110
|
+
* The severity level to be assigned to findings that match the automation rule criteria
|
|
111
|
+
*/
|
|
112
|
+
SeverityId?: number;
|
|
113
|
+
/**
|
|
114
|
+
* The status to be applied to findings that match automation rule criteria
|
|
115
|
+
*/
|
|
116
|
+
StatusId?: number;
|
|
117
|
+
};
|
|
118
|
+
/**
|
|
119
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.BooleanFilter`.
|
|
120
|
+
* Boolean filter for querying findings
|
|
121
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-booleanfilter.html}
|
|
122
|
+
*/
|
|
123
|
+
export type BooleanFilter = {
|
|
124
|
+
/**
|
|
125
|
+
* The value of the boolean
|
|
126
|
+
*/
|
|
127
|
+
Value: boolean;
|
|
128
|
+
};
|
|
129
|
+
/**
|
|
130
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.CompositeFilter`.
|
|
131
|
+
* Enables the creation of filtering criteria for security findings
|
|
132
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html}
|
|
133
|
+
*/
|
|
134
|
+
export type CompositeFilter = {
|
|
135
|
+
/**
|
|
136
|
+
* Enables filtering based on boolean field values
|
|
137
|
+
* @minLength `1`
|
|
138
|
+
* @maxLength `20`
|
|
139
|
+
*/
|
|
140
|
+
BooleanFilters?: OcsfBooleanFilter[];
|
|
141
|
+
/**
|
|
142
|
+
* Enables filtering based on date and timestamp fields
|
|
143
|
+
* @minLength `1`
|
|
144
|
+
* @maxLength `20`
|
|
145
|
+
*/
|
|
146
|
+
DateFilters?: OcsfDateFilter[];
|
|
147
|
+
/**
|
|
148
|
+
* Enables filtering based on map field value
|
|
149
|
+
* @minLength `1`
|
|
150
|
+
* @maxLength `20`
|
|
151
|
+
*/
|
|
152
|
+
MapFilters?: OcsfMapFilter[];
|
|
153
|
+
/**
|
|
154
|
+
* Enables filtering based on numerical field values
|
|
155
|
+
* @minLength `1`
|
|
156
|
+
* @maxLength `20`
|
|
157
|
+
*/
|
|
158
|
+
NumberFilters?: OcsfNumberFilter[];
|
|
159
|
+
/**
|
|
160
|
+
* The logical operator used to combine multiple conditions
|
|
161
|
+
*/
|
|
162
|
+
Operator?: AllowedOperators;
|
|
163
|
+
/**
|
|
164
|
+
* Enables filtering based on string field values
|
|
165
|
+
* @minLength `1`
|
|
166
|
+
* @maxLength `20`
|
|
167
|
+
*/
|
|
168
|
+
StringFilters?: OcsfStringFilter[];
|
|
169
|
+
};
|
|
170
|
+
/**
|
|
171
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.Criteria`.
|
|
172
|
+
* Defines the parameters and conditions used to evaluate and filter security findings
|
|
173
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-criteria.html}
|
|
174
|
+
*/
|
|
175
|
+
export type Criteria = {
|
|
176
|
+
/**
|
|
177
|
+
* The filtering conditions that align with OCSF standards
|
|
178
|
+
*/
|
|
179
|
+
OcsfFindingCriteria?: OcsfFindingFilters;
|
|
180
|
+
};
|
|
181
|
+
/**
|
|
182
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.DateFilter`.
|
|
183
|
+
* A date filter for querying findings
|
|
184
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html}
|
|
185
|
+
*/
|
|
186
|
+
export type DateFilter = {
|
|
187
|
+
/**
|
|
188
|
+
* A date range for the date filter
|
|
189
|
+
*/
|
|
190
|
+
DateRange?: DateRange;
|
|
191
|
+
/**
|
|
192
|
+
* The timestamp formatted in ISO8601
|
|
193
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
194
|
+
*/
|
|
195
|
+
End?: string;
|
|
196
|
+
/**
|
|
197
|
+
* The timestamp formatted in ISO8601
|
|
198
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
199
|
+
*/
|
|
200
|
+
Start?: string;
|
|
201
|
+
};
|
|
202
|
+
/**
|
|
203
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.DateRange`.
|
|
204
|
+
* A date range for the date filter
|
|
205
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html}
|
|
206
|
+
*/
|
|
207
|
+
export type DateRange = {
|
|
208
|
+
/**
|
|
209
|
+
* A date range unit for the date filter
|
|
210
|
+
*/
|
|
211
|
+
Unit: "DAYS";
|
|
212
|
+
/**
|
|
213
|
+
* A date range value for the date filter
|
|
214
|
+
*/
|
|
215
|
+
Value: number;
|
|
216
|
+
};
|
|
217
|
+
/**
|
|
218
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.ExternalIntegrationConfiguration`.
|
|
219
|
+
* The settings for integrating automation rule actions with external systems or service
|
|
220
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-externalintegrationconfiguration.html}
|
|
221
|
+
*/
|
|
222
|
+
export type ExternalIntegrationConfiguration = {
|
|
223
|
+
/**
|
|
224
|
+
* The ARN of the connector that establishes the integration
|
|
225
|
+
* @pattern `.*\S.*`
|
|
226
|
+
*/
|
|
227
|
+
ConnectorArn?: string;
|
|
228
|
+
};
|
|
229
|
+
/**
|
|
230
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.MapFilter`.
|
|
231
|
+
* A map filter for filtering findings
|
|
232
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html}
|
|
233
|
+
*/
|
|
234
|
+
export type MapFilter = {
|
|
235
|
+
/**
|
|
236
|
+
* The condition to apply to the key value when filtering findings with a map filter
|
|
237
|
+
*/
|
|
238
|
+
Comparison: "EQUALS" | "NOT_EQUALS";
|
|
239
|
+
/**
|
|
240
|
+
* The key of the map filter
|
|
241
|
+
* @minLength `1`
|
|
242
|
+
* @maxLength `4096`
|
|
243
|
+
*/
|
|
244
|
+
Key: string;
|
|
245
|
+
/**
|
|
246
|
+
* The value for the key in the map filter
|
|
247
|
+
* @minLength `1`
|
|
248
|
+
* @maxLength `4096`
|
|
249
|
+
*/
|
|
250
|
+
Value: string;
|
|
251
|
+
};
|
|
252
|
+
/**
|
|
253
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.NumberFilter`.
|
|
254
|
+
* A number filter for querying findings
|
|
255
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html}
|
|
256
|
+
*/
|
|
257
|
+
export type NumberFilter = {
|
|
258
|
+
/**
|
|
259
|
+
* The equal-to condition to be applied to a single field when querying for findings
|
|
260
|
+
*/
|
|
261
|
+
Eq?: number;
|
|
262
|
+
/**
|
|
263
|
+
* The greater-than-equal condition to be applied to a single field when querying for findings
|
|
264
|
+
*/
|
|
265
|
+
Gte?: number;
|
|
266
|
+
/**
|
|
267
|
+
* The less-than-equal condition to be applied to a single field when querying for findings
|
|
268
|
+
*/
|
|
269
|
+
Lte?: number;
|
|
270
|
+
};
|
|
271
|
+
/**
|
|
272
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfBooleanFilter`.
|
|
273
|
+
* Enables filtering of security findings based on boolean field values in OCSF
|
|
274
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html}
|
|
275
|
+
*/
|
|
276
|
+
export type OcsfBooleanFilter = {
|
|
277
|
+
/**
|
|
278
|
+
* The name of the field
|
|
279
|
+
*/
|
|
280
|
+
FieldName: "compliance.assessments.meets_criteria" | "vulnerabilities.is_exploit_available" | "vulnerabilities.is_fix_available";
|
|
281
|
+
/**
|
|
282
|
+
* Boolean filter for querying findings
|
|
283
|
+
*/
|
|
284
|
+
Filter: BooleanFilter;
|
|
285
|
+
};
|
|
286
|
+
/**
|
|
287
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfDateFilter`.
|
|
288
|
+
* Enables filtering of security findings based on date and timestamp fields in OCSF
|
|
289
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html}
|
|
290
|
+
*/
|
|
291
|
+
export type OcsfDateFilter = {
|
|
292
|
+
/**
|
|
293
|
+
* The name of the field
|
|
294
|
+
*/
|
|
295
|
+
FieldName: "finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt";
|
|
296
|
+
/**
|
|
297
|
+
* A date filter for querying findings
|
|
298
|
+
*/
|
|
299
|
+
Filter: DateFilter;
|
|
300
|
+
};
|
|
301
|
+
/**
|
|
302
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfFindingFilters`.
|
|
303
|
+
* The filtering conditions that align with OCSF standards
|
|
304
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html}
|
|
305
|
+
*/
|
|
306
|
+
export type OcsfFindingFilters = {
|
|
307
|
+
/**
|
|
308
|
+
* Enables the creation of complex filtering conditions by combining filter
|
|
309
|
+
*/
|
|
310
|
+
CompositeFilters?: CompositeFilter[];
|
|
311
|
+
/**
|
|
312
|
+
* The logical operator used to combine multiple conditions
|
|
313
|
+
*/
|
|
314
|
+
CompositeOperator?: AllowedOperators;
|
|
315
|
+
};
|
|
316
|
+
/**
|
|
317
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfMapFilter`.
|
|
318
|
+
* Enables filtering of security findings based on map field values in OCSF
|
|
319
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html}
|
|
320
|
+
*/
|
|
321
|
+
export type OcsfMapFilter = {
|
|
322
|
+
/**
|
|
323
|
+
* The name of the field
|
|
324
|
+
*/
|
|
325
|
+
FieldName: "resources.tags";
|
|
326
|
+
/**
|
|
327
|
+
* A map filter for filtering findings
|
|
328
|
+
*/
|
|
329
|
+
Filter: MapFilter;
|
|
330
|
+
};
|
|
331
|
+
/**
|
|
332
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfNumberFilter`.
|
|
333
|
+
* Enables filtering of security findings based on numerical field values in OCSF
|
|
334
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html}
|
|
335
|
+
*/
|
|
336
|
+
export type OcsfNumberFilter = {
|
|
337
|
+
/**
|
|
338
|
+
* The name of the field
|
|
339
|
+
*/
|
|
340
|
+
FieldName: "activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count";
|
|
341
|
+
/**
|
|
342
|
+
* A number filter for querying findings
|
|
343
|
+
*/
|
|
344
|
+
Filter: NumberFilter;
|
|
345
|
+
};
|
|
346
|
+
/**
|
|
347
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfStringField`.
|
|
348
|
+
* The name of the field
|
|
349
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfield.html}
|
|
350
|
+
*/
|
|
351
|
+
export type OcsfStringField = "metadata.uid" | "activity_name" | "cloud.account.name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.feature.uid" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name";
|
|
352
|
+
/**
|
|
353
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfStringFilter`.
|
|
354
|
+
* Enables filtering of security findings based on string field values in OCSF
|
|
355
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html}
|
|
356
|
+
*/
|
|
357
|
+
export type OcsfStringFilter = {
|
|
358
|
+
/**
|
|
359
|
+
* The name of the field
|
|
360
|
+
*/
|
|
361
|
+
FieldName: OcsfStringField;
|
|
362
|
+
/**
|
|
363
|
+
* A string filter for filtering findings
|
|
364
|
+
*/
|
|
365
|
+
Filter: StringFilter;
|
|
366
|
+
};
|
|
367
|
+
/**
|
|
368
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.StringFilter`.
|
|
369
|
+
* A string filter for filtering findings
|
|
370
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html}
|
|
371
|
+
*/
|
|
372
|
+
export type StringFilter = {
|
|
373
|
+
/**
|
|
374
|
+
* The condition to apply to a string value when filtering findings
|
|
375
|
+
*/
|
|
376
|
+
Comparison: "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS";
|
|
377
|
+
/**
|
|
378
|
+
* The string filter value
|
|
379
|
+
* @minLength `1`
|
|
380
|
+
* @maxLength `4096`
|
|
381
|
+
*/
|
|
382
|
+
Value: string;
|
|
383
|
+
};
|
|
384
|
+
/**
|
|
385
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.Tags`.
|
|
386
|
+
* A key-value pair to associate with a resource.
|
|
387
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-tags.html}
|
|
388
|
+
*/
|
|
389
|
+
export type Tags = Record<string, string>;
|
|
390
|
+
/**
|
|
391
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
392
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
393
|
+
*/
|
|
394
|
+
export declare class SecurityHubAutomationRuleV2 extends $Resource<"AWS::SecurityHub::AutomationRuleV2", SecurityHubAutomationRuleV2Properties, SecurityHubAutomationRuleV2Attributes> {
|
|
395
|
+
static readonly Type = "AWS::SecurityHub::AutomationRuleV2";
|
|
396
|
+
constructor(logicalId: string, properties: SecurityHubAutomationRuleV2Properties, options?: $ResourceOptions);
|
|
397
|
+
}
|
|
398
|
+
//# sourceMappingURL=AWS-SecurityHub-AutomationRuleV2.d.ts.map
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
/**
|
|
3
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
5
|
+
*/
|
|
6
|
+
export class SecurityHubAutomationRuleV2 extends $Resource {
|
|
7
|
+
static Type = "AWS::SecurityHub::AutomationRuleV2";
|
|
8
|
+
constructor(logicalId, properties, options) {
|
|
9
|
+
super(logicalId, SecurityHubAutomationRuleV2.Type, properties, options);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=AWS-SecurityHub-AutomationRuleV2.js.map
|