@awboost/cfn-resource-types 0.1.360 → 0.1.361
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -26,6 +26,7 @@ export type InspectorV2FilterProperties = {
|
|
|
26
26
|
* @maxLength `128`
|
|
27
27
|
*/
|
|
28
28
|
Name: string;
|
|
29
|
+
Tags?: FilterTagMap;
|
|
29
30
|
};
|
|
30
31
|
/**
|
|
31
32
|
* Attribute type definition for `AWS::InspectorV2::Filter`.
|
|
@@ -62,6 +63,21 @@ export type FilterCriteria = {
|
|
|
62
63
|
* @maxLength `10`
|
|
63
64
|
*/
|
|
64
65
|
AwsAccountId?: StringFilter[];
|
|
66
|
+
/**
|
|
67
|
+
* @minLength `1`
|
|
68
|
+
* @maxLength `10`
|
|
69
|
+
*/
|
|
70
|
+
CodeVulnerabilityDetectorName?: StringFilter[];
|
|
71
|
+
/**
|
|
72
|
+
* @minLength `1`
|
|
73
|
+
* @maxLength `10`
|
|
74
|
+
*/
|
|
75
|
+
CodeVulnerabilityDetectorTags?: StringFilter[];
|
|
76
|
+
/**
|
|
77
|
+
* @minLength `1`
|
|
78
|
+
* @maxLength `10`
|
|
79
|
+
*/
|
|
80
|
+
CodeVulnerabilityFilePath?: StringFilter[];
|
|
65
81
|
/**
|
|
66
82
|
* @minLength `1`
|
|
67
83
|
* @maxLength `10`
|
|
@@ -117,6 +133,16 @@ export type FilterCriteria = {
|
|
|
117
133
|
* @maxLength `10`
|
|
118
134
|
*/
|
|
119
135
|
EcrImageTags?: StringFilter[];
|
|
136
|
+
/**
|
|
137
|
+
* @minLength `1`
|
|
138
|
+
* @maxLength `10`
|
|
139
|
+
*/
|
|
140
|
+
EpssScore?: NumberFilter[];
|
|
141
|
+
/**
|
|
142
|
+
* @minLength `1`
|
|
143
|
+
* @maxLength `10`
|
|
144
|
+
*/
|
|
145
|
+
ExploitAvailable?: StringFilter[];
|
|
120
146
|
/**
|
|
121
147
|
* @minLength `1`
|
|
122
148
|
* @maxLength `10`
|
|
@@ -137,11 +163,41 @@ export type FilterCriteria = {
|
|
|
137
163
|
* @maxLength `10`
|
|
138
164
|
*/
|
|
139
165
|
FirstObservedAt?: DateFilter[];
|
|
166
|
+
/**
|
|
167
|
+
* @minLength `1`
|
|
168
|
+
* @maxLength `10`
|
|
169
|
+
*/
|
|
170
|
+
FixAvailable?: StringFilter[];
|
|
140
171
|
/**
|
|
141
172
|
* @minLength `1`
|
|
142
173
|
* @maxLength `10`
|
|
143
174
|
*/
|
|
144
175
|
InspectorScore?: NumberFilter[];
|
|
176
|
+
/**
|
|
177
|
+
* @minLength `1`
|
|
178
|
+
* @maxLength `10`
|
|
179
|
+
*/
|
|
180
|
+
LambdaFunctionExecutionRoleArn?: StringFilter[];
|
|
181
|
+
/**
|
|
182
|
+
* @minLength `1`
|
|
183
|
+
* @maxLength `10`
|
|
184
|
+
*/
|
|
185
|
+
LambdaFunctionLastModifiedAt?: DateFilter[];
|
|
186
|
+
/**
|
|
187
|
+
* @minLength `1`
|
|
188
|
+
* @maxLength `10`
|
|
189
|
+
*/
|
|
190
|
+
LambdaFunctionLayers?: StringFilter[];
|
|
191
|
+
/**
|
|
192
|
+
* @minLength `1`
|
|
193
|
+
* @maxLength `10`
|
|
194
|
+
*/
|
|
195
|
+
LambdaFunctionName?: StringFilter[];
|
|
196
|
+
/**
|
|
197
|
+
* @minLength `1`
|
|
198
|
+
* @maxLength `10`
|
|
199
|
+
*/
|
|
200
|
+
LambdaFunctionRuntime?: StringFilter[];
|
|
145
201
|
/**
|
|
146
202
|
* @minLength `1`
|
|
147
203
|
* @maxLength `10`
|
|
@@ -213,6 +269,11 @@ export type FilterCriteria = {
|
|
|
213
269
|
*/
|
|
214
270
|
VulnerablePackages?: PackageFilter[];
|
|
215
271
|
};
|
|
272
|
+
/**
|
|
273
|
+
* Type definition for `AWS::InspectorV2::Filter.FilterTagMap`.
|
|
274
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-filter-filtertagmap.html}
|
|
275
|
+
*/
|
|
276
|
+
export type FilterTagMap = Record<string, string>;
|
|
216
277
|
/**
|
|
217
278
|
* Type definition for `AWS::InspectorV2::Filter.MapComparison`.
|
|
218
279
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-inspectorv2-filter-mapcomparison.html}
|
|
@@ -250,8 +311,10 @@ export type NumberFilter = {
|
|
|
250
311
|
export type PackageFilter = {
|
|
251
312
|
Architecture?: StringFilter;
|
|
252
313
|
Epoch?: NumberFilter;
|
|
314
|
+
FilePath?: StringFilter;
|
|
253
315
|
Name?: StringFilter;
|
|
254
316
|
Release?: StringFilter;
|
|
317
|
+
SourceLambdaLayerArn?: StringFilter;
|
|
255
318
|
SourceLayerHash?: StringFilter;
|
|
256
319
|
Version?: StringFilter;
|
|
257
320
|
};
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
|
+
/**
|
|
4
|
+
* The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.
|
|
5
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
6
|
+
*/
|
|
7
|
+
export type SecurityHubAggregatorV2Properties = {
|
|
8
|
+
/**
|
|
9
|
+
* The list of included Regions
|
|
10
|
+
* @minLength `1`
|
|
11
|
+
* @maxLength `50`
|
|
12
|
+
*/
|
|
13
|
+
LinkedRegions: string[];
|
|
14
|
+
/**
|
|
15
|
+
* Indicates to link a list of included Regions
|
|
16
|
+
*/
|
|
17
|
+
RegionLinkingMode: "SPECIFIED_REGIONS";
|
|
18
|
+
/**
|
|
19
|
+
* A key-value pair to associate with the Security Hub V2 resource.
|
|
20
|
+
*/
|
|
21
|
+
Tags?: Tags;
|
|
22
|
+
};
|
|
23
|
+
/**
|
|
24
|
+
* Attribute type definition for `AWS::SecurityHub::AggregatorV2`.
|
|
25
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html#aws-resource-securityhub-aggregatorv2-return-values}
|
|
26
|
+
*/
|
|
27
|
+
export type SecurityHubAggregatorV2Attributes = {
|
|
28
|
+
/**
|
|
29
|
+
* The aggregation Region of the AggregatorV2
|
|
30
|
+
* @pattern `^[a-zA-Z0-9-]{1,32}$`
|
|
31
|
+
*/
|
|
32
|
+
AggregationRegion: string;
|
|
33
|
+
/**
|
|
34
|
+
* The ARN of the AggregatorV2 being created and assigned as the unique identifier
|
|
35
|
+
* @pattern `arn:aws\S*:securityhub:\S*`
|
|
36
|
+
*/
|
|
37
|
+
AggregatorV2Arn: string;
|
|
38
|
+
};
|
|
39
|
+
/**
|
|
40
|
+
* Type definition for `AWS::SecurityHub::AggregatorV2.Tags`.
|
|
41
|
+
* A key-value pair to associate with the Security Hub V2 resource.
|
|
42
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-aggregatorv2-tags.html}
|
|
43
|
+
*/
|
|
44
|
+
export type Tags = Record<string, string>;
|
|
45
|
+
/**
|
|
46
|
+
* The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.
|
|
47
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
48
|
+
*/
|
|
49
|
+
export declare class SecurityHubAggregatorV2 extends $Resource<"AWS::SecurityHub::AggregatorV2", SecurityHubAggregatorV2Properties, SecurityHubAggregatorV2Attributes> {
|
|
50
|
+
static readonly Type = "AWS::SecurityHub::AggregatorV2";
|
|
51
|
+
constructor(logicalId: string, properties: SecurityHubAggregatorV2Properties, options?: $ResourceOptions);
|
|
52
|
+
}
|
|
53
|
+
//# sourceMappingURL=AWS-SecurityHub-AggregatorV2.d.ts.map
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
/**
|
|
3
|
+
* The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
5
|
+
*/
|
|
6
|
+
export class SecurityHubAggregatorV2 extends $Resource {
|
|
7
|
+
static Type = "AWS::SecurityHub::AggregatorV2";
|
|
8
|
+
constructor(logicalId, properties, options) {
|
|
9
|
+
super(logicalId, SecurityHubAggregatorV2.Type, properties, options);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=AWS-SecurityHub-AggregatorV2.js.map
|
|
@@ -0,0 +1,398 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
import type { ResourceOptions as $ResourceOptions } from "@awboost/cfn-template-builder/template";
|
|
3
|
+
/**
|
|
4
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
5
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
6
|
+
*/
|
|
7
|
+
export type SecurityHubAutomationRuleV2Properties = {
|
|
8
|
+
/**
|
|
9
|
+
* A list of actions to be performed when the rule criteria is met
|
|
10
|
+
* @minLength `1`
|
|
11
|
+
* @maxLength `1`
|
|
12
|
+
*/
|
|
13
|
+
Actions: AutomationRulesActionV2[];
|
|
14
|
+
/**
|
|
15
|
+
* Defines the parameters and conditions used to evaluate and filter security findings
|
|
16
|
+
*/
|
|
17
|
+
Criteria: Criteria;
|
|
18
|
+
/**
|
|
19
|
+
* A description of the automation rule
|
|
20
|
+
* @minLength `1`
|
|
21
|
+
* @maxLength `256`
|
|
22
|
+
* @pattern `.*\S.*`
|
|
23
|
+
*/
|
|
24
|
+
Description: string;
|
|
25
|
+
/**
|
|
26
|
+
* The name of the automation rule
|
|
27
|
+
* @minLength `1`
|
|
28
|
+
* @maxLength `256`
|
|
29
|
+
* @pattern `.*\S.*`
|
|
30
|
+
*/
|
|
31
|
+
RuleName: string;
|
|
32
|
+
/**
|
|
33
|
+
* The value for the rule priority
|
|
34
|
+
* @min `1`
|
|
35
|
+
* @max `1000`
|
|
36
|
+
*/
|
|
37
|
+
RuleOrder: number;
|
|
38
|
+
/**
|
|
39
|
+
* The status of the automation rule
|
|
40
|
+
*/
|
|
41
|
+
RuleStatus?: "ENABLED" | "DISABLED";
|
|
42
|
+
/**
|
|
43
|
+
* A key-value pair to associate with a resource.
|
|
44
|
+
*/
|
|
45
|
+
Tags?: Tags;
|
|
46
|
+
};
|
|
47
|
+
/**
|
|
48
|
+
* Attribute type definition for `AWS::SecurityHub::AutomationRuleV2`.
|
|
49
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#aws-resource-securityhub-automationrulev2-return-values}
|
|
50
|
+
*/
|
|
51
|
+
export type SecurityHubAutomationRuleV2Attributes = {
|
|
52
|
+
/**
|
|
53
|
+
* The timestamp formatted in ISO8601
|
|
54
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
55
|
+
*/
|
|
56
|
+
CreatedAt: string;
|
|
57
|
+
/**
|
|
58
|
+
* The ARN of the automation rule
|
|
59
|
+
* @pattern `^arn:aws\S*:securityhub:[a-z0-9-]+:[0-9]{12}:automation-rulev2/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$`
|
|
60
|
+
*/
|
|
61
|
+
RuleArn: string;
|
|
62
|
+
/**
|
|
63
|
+
* The ID of the automation rule
|
|
64
|
+
* @pattern `^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$`
|
|
65
|
+
*/
|
|
66
|
+
RuleId: string;
|
|
67
|
+
/**
|
|
68
|
+
* The timestamp formatted in ISO8601
|
|
69
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
70
|
+
*/
|
|
71
|
+
UpdatedAt: string;
|
|
72
|
+
};
|
|
73
|
+
/**
|
|
74
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.AllowedOperators`.
|
|
75
|
+
* The logical operator used to combine multiple conditions
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-allowedoperators.html}
|
|
77
|
+
*/
|
|
78
|
+
export type AllowedOperators = "AND" | "OR";
|
|
79
|
+
/**
|
|
80
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.AutomationRulesActionV2`.
|
|
81
|
+
* Allows you to configure automated responses
|
|
82
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html}
|
|
83
|
+
*/
|
|
84
|
+
export type AutomationRulesActionV2 = {
|
|
85
|
+
/**
|
|
86
|
+
* The settings for integrating automation rule actions with external systems or service
|
|
87
|
+
*/
|
|
88
|
+
ExternalIntegrationConfiguration?: ExternalIntegrationConfiguration;
|
|
89
|
+
/**
|
|
90
|
+
* The changes to be applied to fields in a security finding when an automation rule is triggered
|
|
91
|
+
*/
|
|
92
|
+
FindingFieldsUpdate?: AutomationRulesFindingFieldsUpdateV2;
|
|
93
|
+
/**
|
|
94
|
+
* The category of action to be executed by the automation rule
|
|
95
|
+
*/
|
|
96
|
+
Type: "FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION";
|
|
97
|
+
};
|
|
98
|
+
/**
|
|
99
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.AutomationRulesFindingFieldsUpdateV2`.
|
|
100
|
+
* The changes to be applied to fields in a security finding when an automation rule is triggered
|
|
101
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html}
|
|
102
|
+
*/
|
|
103
|
+
export type AutomationRulesFindingFieldsUpdateV2 = {
|
|
104
|
+
/**
|
|
105
|
+
* Notes or contextual information for findings that are modified by the automation rule
|
|
106
|
+
* @pattern `.*\S.*`
|
|
107
|
+
*/
|
|
108
|
+
Comment?: string;
|
|
109
|
+
/**
|
|
110
|
+
* The severity level to be assigned to findings that match the automation rule criteria
|
|
111
|
+
*/
|
|
112
|
+
SeverityId?: number;
|
|
113
|
+
/**
|
|
114
|
+
* The status to be applied to findings that match automation rule criteria
|
|
115
|
+
*/
|
|
116
|
+
StatusId?: number;
|
|
117
|
+
};
|
|
118
|
+
/**
|
|
119
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.BooleanFilter`.
|
|
120
|
+
* Boolean filter for querying findings
|
|
121
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-booleanfilter.html}
|
|
122
|
+
*/
|
|
123
|
+
export type BooleanFilter = {
|
|
124
|
+
/**
|
|
125
|
+
* The value of the boolean
|
|
126
|
+
*/
|
|
127
|
+
Value: boolean;
|
|
128
|
+
};
|
|
129
|
+
/**
|
|
130
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.CompositeFilter`.
|
|
131
|
+
* Enables the creation of filtering criteria for security findings
|
|
132
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html}
|
|
133
|
+
*/
|
|
134
|
+
export type CompositeFilter = {
|
|
135
|
+
/**
|
|
136
|
+
* Enables filtering based on boolean field values
|
|
137
|
+
* @minLength `1`
|
|
138
|
+
* @maxLength `20`
|
|
139
|
+
*/
|
|
140
|
+
BooleanFilters?: OcsfBooleanFilter[];
|
|
141
|
+
/**
|
|
142
|
+
* Enables filtering based on date and timestamp fields
|
|
143
|
+
* @minLength `1`
|
|
144
|
+
* @maxLength `20`
|
|
145
|
+
*/
|
|
146
|
+
DateFilters?: OcsfDateFilter[];
|
|
147
|
+
/**
|
|
148
|
+
* Enables filtering based on map field value
|
|
149
|
+
* @minLength `1`
|
|
150
|
+
* @maxLength `20`
|
|
151
|
+
*/
|
|
152
|
+
MapFilters?: OcsfMapFilter[];
|
|
153
|
+
/**
|
|
154
|
+
* Enables filtering based on numerical field values
|
|
155
|
+
* @minLength `1`
|
|
156
|
+
* @maxLength `20`
|
|
157
|
+
*/
|
|
158
|
+
NumberFilters?: OcsfNumberFilter[];
|
|
159
|
+
/**
|
|
160
|
+
* The logical operator used to combine multiple conditions
|
|
161
|
+
*/
|
|
162
|
+
Operator?: AllowedOperators;
|
|
163
|
+
/**
|
|
164
|
+
* Enables filtering based on string field values
|
|
165
|
+
* @minLength `1`
|
|
166
|
+
* @maxLength `20`
|
|
167
|
+
*/
|
|
168
|
+
StringFilters?: OcsfStringFilter[];
|
|
169
|
+
};
|
|
170
|
+
/**
|
|
171
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.Criteria`.
|
|
172
|
+
* Defines the parameters and conditions used to evaluate and filter security findings
|
|
173
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-criteria.html}
|
|
174
|
+
*/
|
|
175
|
+
export type Criteria = {
|
|
176
|
+
/**
|
|
177
|
+
* The filtering conditions that align with OCSF standards
|
|
178
|
+
*/
|
|
179
|
+
OcsfFindingCriteria?: OcsfFindingFilters;
|
|
180
|
+
};
|
|
181
|
+
/**
|
|
182
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.DateFilter`.
|
|
183
|
+
* A date filter for querying findings
|
|
184
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html}
|
|
185
|
+
*/
|
|
186
|
+
export type DateFilter = {
|
|
187
|
+
/**
|
|
188
|
+
* A date range for the date filter
|
|
189
|
+
*/
|
|
190
|
+
DateRange?: DateRange;
|
|
191
|
+
/**
|
|
192
|
+
* The timestamp formatted in ISO8601
|
|
193
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
194
|
+
*/
|
|
195
|
+
End?: string;
|
|
196
|
+
/**
|
|
197
|
+
* The timestamp formatted in ISO8601
|
|
198
|
+
* @pattern `^(\d\d\d\d)-([0][1-9]|[1][0-2])-([0][1-9]|[1-2](\d)|[3][0-1])[T](?:([0-1](\d)|[2][0-3]):[0-5](\d):[0-5](\d)|23:59:60)(?:\.(\d)+)?([Z]|[+-](\d\d)(:?(\d\d))?)$`
|
|
199
|
+
*/
|
|
200
|
+
Start?: string;
|
|
201
|
+
};
|
|
202
|
+
/**
|
|
203
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.DateRange`.
|
|
204
|
+
* A date range for the date filter
|
|
205
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html}
|
|
206
|
+
*/
|
|
207
|
+
export type DateRange = {
|
|
208
|
+
/**
|
|
209
|
+
* A date range unit for the date filter
|
|
210
|
+
*/
|
|
211
|
+
Unit: "DAYS";
|
|
212
|
+
/**
|
|
213
|
+
* A date range value for the date filter
|
|
214
|
+
*/
|
|
215
|
+
Value: number;
|
|
216
|
+
};
|
|
217
|
+
/**
|
|
218
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.ExternalIntegrationConfiguration`.
|
|
219
|
+
* The settings for integrating automation rule actions with external systems or service
|
|
220
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-externalintegrationconfiguration.html}
|
|
221
|
+
*/
|
|
222
|
+
export type ExternalIntegrationConfiguration = {
|
|
223
|
+
/**
|
|
224
|
+
* The ARN of the connector that establishes the integration
|
|
225
|
+
* @pattern `.*\S.*`
|
|
226
|
+
*/
|
|
227
|
+
ConnectorArn?: string;
|
|
228
|
+
};
|
|
229
|
+
/**
|
|
230
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.MapFilter`.
|
|
231
|
+
* A map filter for filtering findings
|
|
232
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html}
|
|
233
|
+
*/
|
|
234
|
+
export type MapFilter = {
|
|
235
|
+
/**
|
|
236
|
+
* The condition to apply to the key value when filtering findings with a map filter
|
|
237
|
+
*/
|
|
238
|
+
Comparison: "EQUALS" | "NOT_EQUALS";
|
|
239
|
+
/**
|
|
240
|
+
* The key of the map filter
|
|
241
|
+
* @minLength `1`
|
|
242
|
+
* @maxLength `4096`
|
|
243
|
+
*/
|
|
244
|
+
Key: string;
|
|
245
|
+
/**
|
|
246
|
+
* The value for the key in the map filter
|
|
247
|
+
* @minLength `1`
|
|
248
|
+
* @maxLength `4096`
|
|
249
|
+
*/
|
|
250
|
+
Value: string;
|
|
251
|
+
};
|
|
252
|
+
/**
|
|
253
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.NumberFilter`.
|
|
254
|
+
* A number filter for querying findings
|
|
255
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html}
|
|
256
|
+
*/
|
|
257
|
+
export type NumberFilter = {
|
|
258
|
+
/**
|
|
259
|
+
* The equal-to condition to be applied to a single field when querying for findings
|
|
260
|
+
*/
|
|
261
|
+
Eq?: number;
|
|
262
|
+
/**
|
|
263
|
+
* The greater-than-equal condition to be applied to a single field when querying for findings
|
|
264
|
+
*/
|
|
265
|
+
Gte?: number;
|
|
266
|
+
/**
|
|
267
|
+
* The less-than-equal condition to be applied to a single field when querying for findings
|
|
268
|
+
*/
|
|
269
|
+
Lte?: number;
|
|
270
|
+
};
|
|
271
|
+
/**
|
|
272
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfBooleanFilter`.
|
|
273
|
+
* Enables filtering of security findings based on boolean field values in OCSF
|
|
274
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html}
|
|
275
|
+
*/
|
|
276
|
+
export type OcsfBooleanFilter = {
|
|
277
|
+
/**
|
|
278
|
+
* The name of the field
|
|
279
|
+
*/
|
|
280
|
+
FieldName: "compliance.assessments.meets_criteria" | "vulnerabilities.is_exploit_available" | "vulnerabilities.is_fix_available";
|
|
281
|
+
/**
|
|
282
|
+
* Boolean filter for querying findings
|
|
283
|
+
*/
|
|
284
|
+
Filter: BooleanFilter;
|
|
285
|
+
};
|
|
286
|
+
/**
|
|
287
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfDateFilter`.
|
|
288
|
+
* Enables filtering of security findings based on date and timestamp fields in OCSF
|
|
289
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html}
|
|
290
|
+
*/
|
|
291
|
+
export type OcsfDateFilter = {
|
|
292
|
+
/**
|
|
293
|
+
* The name of the field
|
|
294
|
+
*/
|
|
295
|
+
FieldName: "finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt";
|
|
296
|
+
/**
|
|
297
|
+
* A date filter for querying findings
|
|
298
|
+
*/
|
|
299
|
+
Filter: DateFilter;
|
|
300
|
+
};
|
|
301
|
+
/**
|
|
302
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfFindingFilters`.
|
|
303
|
+
* The filtering conditions that align with OCSF standards
|
|
304
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html}
|
|
305
|
+
*/
|
|
306
|
+
export type OcsfFindingFilters = {
|
|
307
|
+
/**
|
|
308
|
+
* Enables the creation of complex filtering conditions by combining filter
|
|
309
|
+
*/
|
|
310
|
+
CompositeFilters?: CompositeFilter[];
|
|
311
|
+
/**
|
|
312
|
+
* The logical operator used to combine multiple conditions
|
|
313
|
+
*/
|
|
314
|
+
CompositeOperator?: AllowedOperators;
|
|
315
|
+
};
|
|
316
|
+
/**
|
|
317
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfMapFilter`.
|
|
318
|
+
* Enables filtering of security findings based on map field values in OCSF
|
|
319
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html}
|
|
320
|
+
*/
|
|
321
|
+
export type OcsfMapFilter = {
|
|
322
|
+
/**
|
|
323
|
+
* The name of the field
|
|
324
|
+
*/
|
|
325
|
+
FieldName: "resources.tags";
|
|
326
|
+
/**
|
|
327
|
+
* A map filter for filtering findings
|
|
328
|
+
*/
|
|
329
|
+
Filter: MapFilter;
|
|
330
|
+
};
|
|
331
|
+
/**
|
|
332
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfNumberFilter`.
|
|
333
|
+
* Enables filtering of security findings based on numerical field values in OCSF
|
|
334
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html}
|
|
335
|
+
*/
|
|
336
|
+
export type OcsfNumberFilter = {
|
|
337
|
+
/**
|
|
338
|
+
* The name of the field
|
|
339
|
+
*/
|
|
340
|
+
FieldName: "activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count";
|
|
341
|
+
/**
|
|
342
|
+
* A number filter for querying findings
|
|
343
|
+
*/
|
|
344
|
+
Filter: NumberFilter;
|
|
345
|
+
};
|
|
346
|
+
/**
|
|
347
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfStringField`.
|
|
348
|
+
* The name of the field
|
|
349
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfield.html}
|
|
350
|
+
*/
|
|
351
|
+
export type OcsfStringField = "metadata.uid" | "activity_name" | "cloud.account.name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.feature.uid" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name";
|
|
352
|
+
/**
|
|
353
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.OcsfStringFilter`.
|
|
354
|
+
* Enables filtering of security findings based on string field values in OCSF
|
|
355
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html}
|
|
356
|
+
*/
|
|
357
|
+
export type OcsfStringFilter = {
|
|
358
|
+
/**
|
|
359
|
+
* The name of the field
|
|
360
|
+
*/
|
|
361
|
+
FieldName: OcsfStringField;
|
|
362
|
+
/**
|
|
363
|
+
* A string filter for filtering findings
|
|
364
|
+
*/
|
|
365
|
+
Filter: StringFilter;
|
|
366
|
+
};
|
|
367
|
+
/**
|
|
368
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.StringFilter`.
|
|
369
|
+
* A string filter for filtering findings
|
|
370
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html}
|
|
371
|
+
*/
|
|
372
|
+
export type StringFilter = {
|
|
373
|
+
/**
|
|
374
|
+
* The condition to apply to a string value when filtering findings
|
|
375
|
+
*/
|
|
376
|
+
Comparison: "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS";
|
|
377
|
+
/**
|
|
378
|
+
* The string filter value
|
|
379
|
+
* @minLength `1`
|
|
380
|
+
* @maxLength `4096`
|
|
381
|
+
*/
|
|
382
|
+
Value: string;
|
|
383
|
+
};
|
|
384
|
+
/**
|
|
385
|
+
* Type definition for `AWS::SecurityHub::AutomationRuleV2.Tags`.
|
|
386
|
+
* A key-value pair to associate with a resource.
|
|
387
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-tags.html}
|
|
388
|
+
*/
|
|
389
|
+
export type Tags = Record<string, string>;
|
|
390
|
+
/**
|
|
391
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
392
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
393
|
+
*/
|
|
394
|
+
export declare class SecurityHubAutomationRuleV2 extends $Resource<"AWS::SecurityHub::AutomationRuleV2", SecurityHubAutomationRuleV2Properties, SecurityHubAutomationRuleV2Attributes> {
|
|
395
|
+
static readonly Type = "AWS::SecurityHub::AutomationRuleV2";
|
|
396
|
+
constructor(logicalId: string, properties: SecurityHubAutomationRuleV2Properties, options?: $ResourceOptions);
|
|
397
|
+
}
|
|
398
|
+
//# sourceMappingURL=AWS-SecurityHub-AutomationRuleV2.d.ts.map
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { Resource as $Resource } from "@awboost/cfn-template-builder/template/resource";
|
|
2
|
+
/**
|
|
3
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
5
|
+
*/
|
|
6
|
+
export class SecurityHubAutomationRuleV2 extends $Resource {
|
|
7
|
+
static Type = "AWS::SecurityHub::AutomationRuleV2";
|
|
8
|
+
constructor(logicalId, properties, options) {
|
|
9
|
+
super(logicalId, SecurityHubAutomationRuleV2.Type, properties, options);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=AWS-SecurityHub-AutomationRuleV2.js.map
|